This Data Privacy Statement provides you with information about the type, extent and purposes of collection and use of personal data when visiting our website and in electronic communication with us, together with information about your rights.

You will find further details about us in our provider identification (Legal Notice).

II. Personal details, purposes of processing and legal basis

Personal data a any information that relates to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.

The purpose of processing personal data on our website is the operation of a website with provision of information about our service and about us.

Personal data are processed on our website when necessary for the following purposes:

for use of the website (legal basis: Article 6 (1) sentence 1 b) of the General Data Protection Regulation)

to pursue our interests in improving the user experience, advertising and presenting our services and maintaining security of use (legal basis: Article 6 (1) sentence 1 f) of the General Data Protection Regulation)

for use of the services offered on the website and for pre-contractual measures, in particular for enquiries (legal basis: Article 6 (1) sentence 1 b) of the General Data Protection Regulation)

to fulfil a legal obligation to which we are subject (legal basis: Article 6 (1) sentence 1 c) of the General Data Protection Regulation).

Other details on processing data can be found below under the corresponding headings:

Temporary storage of the IP address by the system is essential to facilitate delivery of the website to your terminal device. The IP address must be stored for the duration of the session for this purpose. These data are not combined with any other data sources. The information is used exclusively to analyse and maintain technical operation of the servers and the network. The legal basis for this is Article 6 (1) sentence 1 f) of the General Data Protection Regulation.

2. Cookies

Our website sometimes uses so-called cookies, although only to a very limited extent. Cookies are small text files that are placed on your terminal device and saved by your browser. Cookies are used for our legitimate interest in making our website more user-friendly and effective and in advertising and offering our services in the best possible way. The legal basis for this is Article 6 (1) sentence 1 f) of the General Data Protection Regulation.

The cookies used are so-called session cookies. These are erased automatically at the end of your visit.

3. Contact via e-mail

If you submit enquiries to us by e-mail, your details from the e-mail are processed, including the data you provide there, for the purposes of dealing with your enquiry and any follow-up questions. The legal basis for this is Article 6 (1) sentence 1 b) of the General Data Protection Regulation.

4. Newsletter

If you register your e-mail address for our newsletter, we will send you information and invitations to our activities and projects (in particular to exhibitions) at irregular intervals.

Following your registration with your e-mail address, you will first receive a confirmation message from us sent to that address. In this e-mail you are asked to confirm your registration by clicking on a link. This is required to prevent unauthorised persons from entering your e-mail address on our distribution list without your consent. As evidence of the registration process, this is logged by storing the time of registration and confirmation and the IP addresses for the so-called double opt-in process. In addition, we process your e-mail address to send messages.

The legal basis for this is Article 6 (1) sentence 1 a) and/or (1) sentence 1 b) of the General Data Protection Regulation. In addition, we have the legitimate interest in processing these data of preventing misuse and ensuring the security of our systems; the legal basis for this is Article 6 (1) sentence 1 f) of the General Data Protection Regulation.

You can cancel your subscription at any time by clicking on a link that we include in every e-mail or by sending a message to the contact address provided above. You can withdraw your consent with effect from that point forward at any time and also object to processing of your data, see your rights below.

5. Our social media profiles

We do not use any social media plug-ins on our website, but only simple hyperlinks to our social media profiles. When you visit our website, there is therefore no direct processing of data in connection with social media platforms.

If you do visit the social media platforms, however, and view our profiles there, we wish to point out the following:

Instagram

The website under www.instagram.com is operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 USA (“Instagram”). The purpose and extent of data processing by Instagram and the rights and setting options to protect users’ privacy in this connection can be found in the relevant data protection policy:https://help.instagram.com/155833707900388

If a user is a member of Instagram and does not want Instagram to collect any data about him via this website and associate them with his membership data on Instagram, he must log out of Instagram before visiting our website and delete his cookies. Other settings can be adjusted and objections to the use of data submitted via the Instagram profile settings:https://help.instagram.com/284802804971822?helpref=page_content

III. Receipt of personal data

Personal data collected as a result of using our website are communicated to the following recipients and categories of recipients:

Otherwise your personal data collected as a result of your use of our website will not be passed on to third parties without your express consent, unless we are obliged to do so by law, or passing on the data is essential to execute a contractual relationship.

IV. Duration of storage

Stored server log files and IP addresses are erased at the latest after 10 days.

Session cookies are erased automatically at the end of a session.

We process your data from your e-mail enquiries until your enquiry has been dealt with completely and has been resolved. The details are then erased. Please note, however, that there may be retention obligations under commercial and tax law for certain data relating to legal transactions with you of at least six years (Section 257 of the German Commercial Code) or ten years (Section 147 of the German Tax Code), which can also apply to contact requests and e-mails.

Otherwise, a check is carried out to determine whether data can be erased in an annual cycle. This is the case if the purpose of processing and the requirements of the legal basis for processing no longer apply and there are no statutory obligations for retention.

V. Provision of personal data and rights of data subjects

You are not legally obliged to provide your personal data. They may have to be provided, however, to conclude a contract or for certain functions of the website. If you do not provide them, it may therefore be the case that a contract or a function of the website cannot be offered.

There is no automatic decision-making on the website and no profiling takes place.

The rights of data subjects are based, in particular, on Articles 15 to 23 and Article 77 of the General Data Protection Regulation and Sections 32 to 37 of the German Federal Data Protection Act (revised).

As far as your personal data is concerned, you have the right in respect of us to

Please direct all enquiries, requests and messages to us, see above under I.

If you believe that the processing of your personal data breaches data protection law, you always have the right

to lodge a complaintwith the relevant supervisory authority, see Article 77 of the General Data Protection Regulation. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation. The supervisory authority responsible for us is the State Data Protection and Freedom of Information Commissioner for North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.